More smurf fun

Mailman List Mirror (Read Only)
1

Here's the latest group of smurf-able networks. Note some cool,
high-connectivity networks are on here, like Bay Networks.
At least one was still active on mae-west, if you can believe it.

[ ... ]

  Is there any good reason I shouldn't ask my upstream network providers to
filter all packets coming in to our network with one of these source
addresses? And is there any good reason this wouldn't very effectively
prevent us from being a Smurf target?

Thanks for any thoughts/info,

------Scott.

2

Cuz some of them may have been fixed by now.

Hank

3

Hi all,

> >Here's the latest group of smurf-able networks. Note some cool,
> >high-connectivity networks are on here, like Bay Networks.
> >At least one was still active on mae-west, if you can believe it.
>
> [ ... ]
>
> Is there any good reason I shouldn't ask my upstream network providers to
> filter all packets coming in to our network with one of these source
> addresses? And is there any good reason this wouldn't very effectively
> prevent us from being a Smurf target?

Cuz some of them may have been fixed by now.

I'm agree, one of that networks -at least- is now protected [132.248.0.0] so
you don't need to filter packets coming from the nets on the list.

Greetings,

4

So what we need is an RBL for smurf amplifier networks. That would
seriously encourage these sites to block broadcast pings and would
automatically removed fixed sites from everyone's filters.

5

^^^^^^^^^^^^^^^^^^^^

Um, I believe you mispelt "my network".

Cheers,
-- jra